Re: Kerberos PAC decoding support

"Greg Hudson" <[email protected]>
Newsgroups gmane.comp.encryption.kerberos.general
Message-ID <[email protected]>
On 8/24/23 02:18, Ondrej Valousek wrote:
> I am wondering if it is reasonable to request the MIT library to support PAC decoding (possibly in form of Named Attributes) so that the information there could be used in calling application, I.e.:

PAC buffers are available via these name attributes:

   urn:mspac: (for the whole PAC)
   urn:mspac:logon-info
   urn:mspac:credentials-info
   urn:mspac:server-checksum
   urn:mspac:privsvr-checksum
   urn:mspac:client-info
   urn:mspac:delegation-info
   urn:mspac:upn-dns-info

libkrb5 doesn't do any NDR decoding, so that part has to be done by the 
application.
________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.